Database Addon for Contact Form 7 – CFDB7
Database Addon for Contact Form 7 – CFDB7 has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 7 are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2021 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (29%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor.
Every one of the 7 issues recorded for Database Addon for Contact Form 7 – CFDB7 has a vendor fix available, so running the current release closes all known holes.
5 independent researchers contributed these findings, most of them (2) reported by R3N0. Database Addon for Contact Form 7 – CFDB7 is installed on roughly 600,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2021-24144Contact Form 7 Database Addon <= 1.2.5.4 - CSV Injection
Read the full analysisVulnerability Records

Database Addon for Contact Form 7 – CFDB7
Author
Arshid
The “CFDB7” plugin saves contact form 7 submissions to your WordPress database. Export the data to a CSV file. By simply installing the plugin, it will automatically begin to capture form submissions from contact form 7. Features of CFDB 7 No configuration is needed Save Contact Form 7 form submitted data to the database. Single database table for all contact form 7 forms Easy to use and lightweight plugin Developer friendly & easy to customize Display all created contact form 7 form list. Export CF7 DB (CF7 Database – cf7db) data in CSV file Form Email Testing Tool MailMug – SMTP Sandbox Plugins PostBox Email Log WP mail smtp Pro Addons Entry Automation Automatically export CFDB7 form entries to CSV on a schedule Advanced MYSQL DB Separate MySQL column for each cf7 input field Excel Spreadsheet (XLSX) Extension Connect CFDB7 to an external database or another DB Drag & Drop File Upload Contact form 7 drag and drop files upload plugin. Already Submitted? Trigger error if a field is already submitted Popup Message Replace your validation and success messages with beautiful popup messages to attract visitors. Export PDF File Easy to export contact forms from database to PDF file Import CSV to Database Import data from the CSV file to the CFDB7 database Support : http://www.ciphercoin.com/contact/ Extensions : Contact form 7 more Add-ons
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C